PHP - Newb - How To Easily Find Out What Date A Day Falls On...?

My app just found an error in my login.php file on accident. The app is supposed to get credentials from the user then submit them to my server for verification. I accidentally submitted null credentials (empty strings) and the server returned auth=true. I can't figure out why. 

Server code:

<?php
require_once '../../includes/db_connect.inc';
require_once 'user.php';
$header = "Content-Type: application/json";
$_SESSION['error'] = array();
if (!isset($_GET['secureSubmit']) || $_GET['secureSubmit'] != true){
    die(header("Location: ../access_denied.php"));
}
// check requirements
$required = array('username', 'password');
foreach ($required as $requiredField){
  if (!isset($_GET[$requiredField]) || $_GET[$requiredField] == ""){
    $_SESSION['error'][] = $requiredField . " is incomplete or missing.";
    }
}
  if (count($_SESSION['error']) > 0){
    $errors = array();
    for ($i = 0; $i < count($_SESSION['error']); $i++){
      $errors[]=array(
        'num' => $i,
        'desc' => $_SESSION['error'][$i]
      );
  }
  print json_encode($errors);
  exit;
}else{
  $user = new User;
  if ($user->authenticate($_GET['username'], $_GET['password'])){
    print json_encode(array(
      'auth' => true,
      'call' => "login",
      'sid' => session_id(),
      'credits' => $_SESSION['credits']
      )
    );
  }else{
    print json_encode(array('auth' => false,));
  }
}
?>
	

I went to my browser and entered

http://localhost:10509/login.php?secureSubmit=true&username=%22%22&password=%22%22

and recieved

{auth":true,"call":"login","sid":"29e81981a4709407e2fd8a8f734ad9bc","credits":null}

as a response, can anyone find where the invalid positive is coming from? The initial check for empty username or password should be failing before it ever gets to the check.

Edited March 19, 2019 by Karaethon
Code cleanup for readability

Hi ppl,
I am not an php expert, but I want to allow my website users to edit a record in mySQL table.
I need to allow them changing Name and description of a product, thats all. easy edit.

Is there a ready component that will do the hard work for me?
Thank you!

Hey,

I'm using a script which allows you to click on a calendar to select the date to submit to the database.

The date is submitted like this: 2014-02-08

Is there a really simple way to prevent rows showing if the date is in the past?

Something like this:
if($currentdate < 2014-02-08 || $currentdate == 2014-02-08) {

}

Thanks very much,
Jack

I need to rewrite this php statement
Code: [Select]
<img src="<?php bloginfo('template_directory'); ?>/images/mainimage.jpg" title="" alt="" />
When I try to do this
Code: [Select]
<?php echo '<img src="<?php bloginfo('template_directory'); ?>/images/mainimage.jpg" title="" alt="" />' ; ?>It does not work, because I guess I've open and closed a php code inside php.

How do I properly write this statement?

Thanks
Ben

Hey i am doing a login and blog system i have done the login and reg part but i am having troubles with the adding post. Basically at the moment my user can make a post and they can anyone can  view it, but i need to the user only be able to create there own prv post and that when anybody else logs in they cant  make a post under it. Does anyone have any ideas?

this is my code for the posts


<?php
session_start();

include('db_connect.php');
?>
Welcome to the fear blog          <a href="logout.php">log out</a><hr/>
<?php
$sql = mysql_query("SELECT * FROM posts ORDER BY id ");
while($row = mysql_fetch_array($sql)){
   $title = $row['title'];
   $content = $row['content'];
   $category = $row['category'];
?>

<div id="post">
<div id="wrapper">

<div id="title"> <label>Title</label> <?php echo $title; ?> </div>   

<div id="category"><label>category</label> <?php echo $category; ?> </div>


<div id="content"> <label>Content</label><?php echo $content; ?> </div>
</div>

<?php
}
?>


    <div id="contents">
   <form action="post.php" method="post">
  <label> Title:</label><input type="text" name="title" /><br/>
 <label> Category:</label><input type="text" name="category" /><br />
<label> Content:</label><textarea name="content"></textarea><br/>
<input type="submit" name="submit" value="Post"/>

 
   </form>
   </div>
   </div>
</div>
</div>

Hi - I'm using SESSION variables to keep track of customers who come onto the site to order stuff. For example $_SESSION['customerid'] all the incoming customers.


I also use SESSION variables with a different value for the managers to look at and keep track of customer data. eg :  $_SESSION['customer']['firstname']

I am expecting many customers and managers to be simultaneously using the site.   

QUESTION: Do I need to increment the SESSION variable in some way in order to avoid that a session gets overwritten,  or will my SESSION variables keep track and keep everything separated by dint of the fact that they contain different values ?

so far my testing shows that things are working correctly, but I can only test with 3 / 4 virtual users in different browser windows .

Hi, preg_match isn't working the way I feel it should.

The idea, when i finally get this script working, is to echo an order form back to the client (so they can see what they've ordered). At the moment I'm just trying to get the product description for each ordered product.

$aryOrder:
prodCode[6722] with a value of (for instance) 2
prodCode[6724] with a value of (for instance) 1
etc
(only ordered products present in the array)

prodDB.txt
6722 Hydrocolloid Blister Care
6724 Toe Spreader
etc
All products present in text file (prode code Description)

BUT I get an echo with no matches for any ordered product (or any prod for that matter) i.e.
no match: 6724, 6724 TOE SPREADER
when clearly, the product code (6724 $aryItem) is present in the text file line ($line_of_text).

I just don't get it!

foreach($aryOrder as $aryItem => $qty) {
     $file_handle = fopen("prodDB.txt", "r");
     while (!feof($file_handle)) {
      $line_of_text = fgets($file_handle);
      if (preg_match($aryItem, $line_of_text))
        {
         echo "Matched! $aryItem, $line_of_text QTY: $qty <br>";
         }
       else
        {
       echo "no match: $aryItem, $line_of_text <br>";
       }
       }
      fclose($file_handle);               
       }

I'm completely new to PHP, trying to work it out from the manual, so I've probably made a very basic mistake, and may even be going about this in entirely the wrong way.
Any help much appreciated,
Steve

Hey guys havent coded in a while and im stumped. Ive checked google but to no avail lol

i wanna include my config file and have an IF statement to run/include another file IE...

<?php
     include("config/config.php");
          If File(Not Exist);
               include("install/config.php");
?>

If someone can put me back on track it would be greatly epreciated

Hi All,

Im modifying someone elses PHP code (survey tool) (and i havent done PHP for years) Basically the code exports to an external csv file to a file called export.csv
However everytime i get it to export, it creates copies. ie it will export to export(2).csv and export(3).csv.

How can i make it so that it exports and overwritesa/ammed the existing export.csv file?

I had a look at the code and i believe this code below is doing the exporting but not sure

code doing the export ( i think)

Code: [Select]
<?php

include('classes/main.class.php');
include('classes/special_results.class.php');

$survey = new UCCASS_Special_Results;

echo $survey->results_csv(@$_REQUEST['sid'],$_REQUEST['export_type']);

?>
The class that it uses to export

Code: [Select]
<?php

//======================================================
// Copyright (C) 2004 John W. Holmes, All Rights Reserved
//
// This file is part of the Unit Command Climate
// Assessment and Survey System (UCCASS)
//
// UCCASS is free software; you can redistribute it and/or
// modify it under the terms of the Affero General Public License as
// published by Affero, Inc.; either version 1 of the License, or
// (at your option) any later version.
//
// http://www.affero.org/oagpl.html
//
// UCCASS is distributed in the hope that it will be
// useful, but WITHOUT ANY WARRANTY; without even the implied warranty
// of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// Affero General Public License for more details.
//======================================================

class UCCASS_Special_Results extends UCCASS_Main
{
    function UCCASS_Special_Results()
    {
        $this->load_configuration();

        //Increase time limit of script to 2 minutes to ensure
        //very large results can be shown or exported
        set_time_limit(120);
    }

    function results_table($sid)
    {
        $sid = (int)$sid;

        if(!$this->_CheckAccess($sid,RESULTS_PRIV,"results_table.php?sid=$sid"))
        {
            switch($this->_getAccessControl($sid))
            {
                case AC_INVITATION:
                    return $this->showInvite('results_table.php',array('sid'=>$sid));
                break;
                case AC_USERNAMEPASSWORD:
                default:
                    return $this->showLogin('results_table.php',array('sid'=>$sid));
                break;
            }
        }

        $data = array();
        $qid = array();
        $survey = array();

        $survey['sid'] = $sid;

        $query = "SELECT q.qid, q.question, s.name, s.user_text_mode, s.survey_text_mode, s.date_format
                  FROM {$this->CONF['db_tbl_prefix']}questions q, {$this->CONF['db_tbl_prefix']}surveys s
                  WHERE q.sid = $sid and s.sid = q.sid ORDER BY q.page, q.oid";
        $rs = $this->db->Execute($query);
        if($rs === FALSE)
        { $this->error('Error in query: ' . $this->db->ErrorMsg()); return; }

        $questions = array();
        if($r = $rs->FetchRow($rs))
        {
            $survey_text_mode = $r['survey_text_mode'];
            $user_text_mode = $r['user_text_mode'];
            $date_format = $r['date_format'];
            $survey['name'] = $this->SfStr->getSafeString($r['name'],$survey_text_mode);

            do{
                $data['questions'][] = $this->SfStr->getSafeString($r['question'],$survey_text_mode);
                $qid[$r['qid']] = $r['qid'];
            }while($r = $rs->FetchRow($rs));
        }
        else
        { $this->error('No questions for this survey.'); return; }

        if(isset($_SESSION['filter_text'][$sid]) && isset($_SESSION['filter'][$sid]) && strlen($_SESSION['filter_text'][$sid])>0)
        { $this->smarty->assign_by_ref('filter_text',$_SESSION['filter_text'][$sid]); }
        else
        { $_SESSION['filter'][$sid] = ''; }

        $query = "SELECT GREATEST(rt.qid, r.qid) AS qid, GREATEST(rt.sequence, r.sequence) AS seq,
                  GREATEST(rt.entered,r.entered) AS entered,
                  q.question, av.value, rt.answer FROM {$this->CONF['db_tbl_prefix']}questions q LEFT JOIN {$this->CONF['db_tbl_prefix']}results
                  r ON q.qid = r.qid LEFT JOIN {$this->CONF['db_tbl_prefix']}results_text rt ON q.qid = rt.qid LEFT JOIN
                  {$this->CONF['db_tbl_prefix']}answer_values av ON r.avid = av.avid WHERE q.sid = $sid {$_SESSION['filter'][$sid]}
                  ORDER BY seq, q.page, q.oid";

        $rs = $this->db->Execute($query);
        if($rs === FALSE)
        { $this->error('Error in query: ' . $this->db->ErrorMsg()); return; }

        $seq = '';
        $x = -1;
        while($r = $rs->FetchRow($rs))
        {
            if(!empty($r['qid']))
            {
                if($seq != $r['seq'])
                {
                    $x++;
                    $seq = $r['seq'];
                    $answers[$x]['date'] = date($date_format,$r['entered']);
                }
                if(isset($answers[$x][$r['qid']]))
                { $answers[$x][$r['qid']] .= MULTI_ANSWER_SEPERATOR . $this->SfStr->getSafeString($r['value'] . $r['answer'],$user_text_mode); }
                else
                { $answers[$x][$r['qid']] = $this->SfStr->getSafeString($r['value'] . $r['answer'],$user_text_mode); }
            }
            $last_date = date($date_format,$r['entered']);
        }
        $answers[$x]['date'] = $last_date;

        $xvals = array_keys($answers);

        foreach($xvals as $x)
        {
            foreach($qid as $qid_value)
            {
                if(isset($answers[$x][$qid_value]))
                { $data['answers'][$x][] = $answers[$x][$qid_value]; }
                else
                { $data['answers'][$x][] = '&nbsp;'; }
            }
            $data['answers'][$x][] = $answers[$x]['date'];
        }

        $this->smarty->assign_by_ref('data',$data);
        $this->smarty->assign_by_ref('survey',$survey);
        return $this->smarty->fetch($this->template.'/results_table.tpl');
    }

    function results_csv($sid, $export_type=EXPORT_CSV_TEXT)
    {
        $sid = (int)$sid;


        $retval = '';

        if(!$this->_CheckAccess($sid,RESULTS_PRIV,"results_csv.php?sid=$sid"))
        {
            switch($this->_getAccessControl($sid))
            {
                case AC_INVITATION:
                    return $this->showInvite('results_csv.php',array('sid'=>$sid));
                break;
                case AC_USERNAMEPASSWORD:
                default:
                    return $this->showLogin('results_csv.php',array('sid'=>$sid));
                break;
            }
        }

        header("Content-Type: text/plain; charset={$this->CONF['charset']}");
        header("Content-Disposition: attachment; filename=Export.csv");

        $query = "SELECT q.qid, q.question, s.date_format
                  FROM {$this->CONF['db_tbl_prefix']}questions q, {$this->CONF['db_tbl_prefix']}surveys s
                  WHERE q.sid = $sid and s.sid = q.sid ORDER BY q.page, q.oid";
        $rs = $this->db->Execute($query);
        if($rs === FALSE)
        { $this->error('Error in query: ' . $this->db->ErrorMsg()); return; }

        $questions = array();
        if($r = $rs->FetchRow($rs))
        {
            $date_format = $r['date_format'];
            do{
                $questions[$r['qid']] = $r['question'];
            }while($r = $rs->FetchRow($rs));
        }
        else
        { $this->error('No questions for this survey'); return; }

        if(isset($_SESSION['filter_text'][$sid]) && isset($_SESSION['filter'][$sid]) && strlen($_SESSION['filter_text'][$sid])>0)
        { $this->smarty->assign_by_ref('filter_text',$_SESSION['filter_text'][$sid]); }
        else
        { $_SESSION['filter'][$sid] = ''; }


        $query = "SELECT GREATEST(rt.qid, r.qid) AS qid, GREATEST(rt.sequence, r.sequence) AS seq,
                  GREATEST(rt.entered, r.entered) AS entered,
                  q.question, av.value, av.numeric_value, rt.answer FROM {$this->CONF['db_tbl_prefix']}questions q LEFT JOIN {$this->CONF['db_tbl_prefix']}results
                  r ON q.qid = r.qid LEFT JOIN {$this->CONF['db_tbl_prefix']}results_text rt ON q.qid = rt.qid LEFT JOIN
                  {$this->CONF['db_tbl_prefix']}answer_values av ON r.avid = av.avid WHERE q.sid = $sid {$_SESSION['filter'][$sid]}
                  ORDER BY seq, q.page, q.oid";

        $rs = $this->db->Execute($query);
        if($rs === FALSE)
        { $this->error('Error in query: ' . $this->db->ErrorMsg()); return; }

        $seq = '';
        $x = 0;
        while($r = $rs->FetchRow($rs))
        {
            if(!empty($r['qid']))
            {
                if($seq != $r['seq'])
                {
                    $x++;
                    $seq = $r['seq'];
                    $answers[$x]['date'] = date($date_format,$r['entered']);
                }

                switch($export_type)
                {
                    case EXPORT_CSV_NUMERIC:
                        if(empty($r['answer']))
                        { $value = $r['numeric_value']; }
                        else
                        { $value = $r['answer']; }
                    break;

                    case EXPORT_CSV_TEXT:
                    default:
                        if(empty($r['answer']))
                        { $value = $r['value']; }
                        else
                        { $value = $r['answer']; }
                    break;
                }

                if(isset($answers[$x][$r['qid']]))
                { $answers[$x][$r['qid']] .= MULTI_ANSWER_SEPERATOR . $value; }
                else
                { $answers[$x][$r['qid']] = $value; }
            }
            $last_date = date($date_format,$r['entered']);
        }
        $answers[$x]['date'] = $last_date;

        $line = '';
        foreach($questions as $question)
        { $line .= "\"" . str_replace('"','""',$question) . "\","; }
        $retval .= $line . "Datetime\n";

        $xvals = array_keys($answers);

        foreach($xvals as $x)
        {
            $line = '';
            foreach($questions as $qid=>$question)
            {
                if(isset($answers[$x][$qid]))
                {
                    if(is_numeric($answers[$x][$qid]))
                    { $line .= "{$answers[$x][$qid]},"; }
                    else
                    { $line .= "\"" . str_replace('"','""',$answers[$x][$qid]) . "\","; }
                }
                else
                { $line .= ","; }
            }
            $retval .= $line . '"' . $answers[$x]['date'] . "\"\n";
        }

        return $retval;
    }
}

?>

Hi - wondering if someone can give a little guidance:

Why doesn't this trim the whitespace out of the string postzip?

trim(strtoupper(((isset($_POST["postzip"]))?$_POST["postzip"]:"")))

Thanks

I have a simple form that connects to this php page. Only two variables, "ArticleDescription" & "URL". I've tried a number of things, several of which are listed below, but have had no success. I'm certain it's just my idiocy but am requesting some help with this. I KNOW it's an easy fix, it's just over my head, I'm only four days into programming, so I'm a complete newb. Your kindness is requested.

----
<?php

// connection

mysql_select_db("doofyd5_comments", $con);

$ArticleDescription=mb_convert_encoding($ArticleDescription, 'UTF-8', 'UTF-8');
$URL=htmlspecialchars($URL, ENT_QUOTES);
$ArticleDescription=str_replace('\"','&quot;',$ArticleDescription);

$sql="INSERT INTO web_articles (ArticleDescription, URL) VALUES ('$_POST[ArticleDescription]','$_POST[URL]')";

if (mysql_query($sql,$con)) {
    header ("location:desiredurl");
    require_once('desiredurl");
    exit();
    }
    else {

echo "You may have added a single quote to the article description!";
}

mysql_close($con)

?>
----

Hi there,

I'm new to this (2 days into it) but I've managed to rummage together 2 tables, and PHP to input into the database. My issue now is that I want to merge one of the two tables into the other. I've managed to do this, but for some reason I'm getting duplicate entries from the 2nd table.

Code:
//mysql connection

$query = "SELECT ArticleDescription, URL FROM top_web_articles"or die ("query is messed up");   

   $result = mysql_query($query);
   while ($line = mysql_fetch_array($result, MYSQL_ASSOC)) {

mysql_query("INSERT INTO web_articles (ArticleDescription, URL) SELECT ArticleDescription, URL FROM top_web_articles") or die ("Failed merge!");   
}
echo ("Successful merge!");
?>

Does anyone have any suggestions as to where I went wrong?

Thanks in advance,
Doofy.

A couple months back, I asked on a gaming forum if anyone knew of a website that would track your *Steam Wishlist and email you when one of your wishlist games went on sale.
No one at the time knew of a **solution, so I decided to buy "PHP, MySQL and Javascript" and try to roll my own.

I managed to get the basics working.

After the basics,  I started thinking about fun stuff I could do with the data I collected from Steam regarding the games that go on sale regularly.
The first part of my code file_get_content's the ***sale page(s) of games, and sucks out the games name, regular price, sale price, and the games homepage URL on Steam. 
This is enough to accomplish my basic task.

The second part is where I need help, and that's getting more details on the game.

The additional details I want to get about the game include its Publisher and Developer, and to get that detail I need to go to the games homepage URL I previously got from the global sale page.

The issue is this:  Some games have an age-restriction limitation, and you have to fill out a date form before entering the games homepage.
An example of one of those pages would be: http://store.steampowered.com/agecheck/app/1250/

I want to be able to POST a legal age to the above URL, and then (this is where I'm hazy) "re-load" the same URL, authorized by my previous POST.
Is that possible?


* Steam is a digital download service for computer games.
** Subsequently, there was another website found.  But I was well into developing my solution and having fun.
*** Example: http://store.steampowered.com/search/?specials=1

I am running three scheduled tasks on my website.  I am only allowed three per day by my host.
I want to add another one.

Can I simply call another php program from within a php program which is currently running ?

I have an array I want to define in Php and then sort it.
I am pretty new to Php and don't know the syntax or what funcs to use.

Here's the array I want:

user_email, user_name, hours_worked_per_week, total_earned

There will be about 120 users, and I want to sort them ascending alphabetically  on  user_email